Detections
Analytics
OL08-00-010186 - OL 8 IP tunnels must use FIPS 140-3-approved cryptographic algorithms.
Information
Overriding the system crypto policy makes the behavior of the Libreswan service violate expectations, and makes system configuration more fragmented.Solution
Configure Libreswan to use the system cryptographic policy.Add the following line to "/etc/ipsec.conf":
include /etc/crypto-policies/back-ends/libreswan.config
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_8_V2R8_STIG.zip
Item Details
Audit Name: DISA Oracle Linux 8 STIG v2r8
Category: ACCESS CONTROL
References: 800-53|AC-17(2), CAT|I, CCI|CCI-000068, Rule-ID|SV-283450r1188541_rule, STIG-ID|OL08-00-010186, Vuln-ID|V-283450
Plugin: Unix
Control ID: 544c559c49fcb614798e6ab56a547e3968ee4abec819c1e4272f19bc044a5ec7